Lucene search
MitreCVE-2024-34919HistoryMay 17, 2024 - 2:15 p.m.
CVE-2024-34919
2024-05-1714:15:10
CWE-74
mitre
web.nvd.nist.gov
25
arbitrary file upload
pisay online
e-learning system
php/mysql
code execution
cve-2024-34919
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System using PHP/MySQL v1.0 allows attackers to execute arbitrary code via uploading a crafted file.
References
Related
cvelist
cvelist
CVE-2024-34919
1976-01-01 00:00:00
nvd
nvd
CVE-2024-34919
2024-05-17 14:15:10
vulnrichment
vulnrichment
CVE-2024-34919
1976-01-01 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
High
Related for CVE-2024-34919